public class HttpRequestDecoder extends HttpObjectDecoder
ByteBuf
s into HttpRequest
s and HttpContent
s.
Name | Meaning |
---|---|
maxInitialLineLength |
The maximum length of the initial line (e.g. "GET / HTTP/1.0" )
If the length of the initial line exceeds this value, a
TooLongHttpLineException will be raised. |
maxHeaderSize |
The maximum length of all headers. If the sum of the length of each
header exceeds this value, a TooLongHttpHeaderException will be raised. |
maxChunkSize |
The maximum length of the content or each chunk. If the content length
exceeds this value, the transfer encoding of the decoded request will be
converted to 'chunked' and the content will be split into multiple
HttpContent s. If the transfer encoding of the HTTP request is
'chunked' already, each chunk will be split into smaller chunks if the
length of the chunk exceeds this value. If you prefer not to handle
HttpContent s in your handler, insert HttpObjectAggregator
after this decoder in the ChannelPipeline . |
Name | Default value | Meaning |
---|---|---|
allowDuplicateContentLengths |
When set to false , will reject any messages that contain multiple Content-Length header fields.
When set to true , will allow multiple Content-Length headers only if they are all the same decimal value.
The duplicated field-values will be replaced with a single valid Content-Length field.
See RFC 7230, Section 3.3.2. |
|
allowPartialChunks |
If the length of a chunk exceeds the ByteBuf s readable bytes and allowPartialChunks
is set to true , the chunk will be split into multiple HttpContent s.
Otherwise, if the chunk size does not exceed maxChunkSize and allowPartialChunks
is set to false , the ByteBuf is not decoded into an HttpContent until
the readable bytes are greater or equal to the chunk size. |
Without header validation, your system can become vulnerable to CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') .
This recommendation stands even when both peers in the HTTP exchange are trusted, as it helps with defence-in-depth.
ByteToMessageDecoder.Cumulator
ChannelHandler.Sharable
DEFAULT_ALLOW_DUPLICATE_CONTENT_LENGTHS, DEFAULT_ALLOW_PARTIAL_CHUNKS, DEFAULT_CHUNKED_SUPPORTED, DEFAULT_INITIAL_BUFFER_SIZE, DEFAULT_MAX_CHUNK_SIZE, DEFAULT_MAX_HEADER_SIZE, DEFAULT_MAX_INITIAL_LINE_LENGTH, DEFAULT_VALIDATE_HEADERS, headersFactory, trailersFactory, validateHeaders
COMPOSITE_CUMULATOR, MERGE_CUMULATOR
构造器和说明 |
---|
HttpRequestDecoder()
Creates a new instance with the default
maxInitialLineLength (4096) , maxHeaderSize (8192) , and
maxChunkSize (8192) . |
HttpRequestDecoder(HttpDecoderConfig config)
Creates a new instance with the specified configuration.
|
HttpRequestDecoder(int maxInitialLineLength,
int maxHeaderSize,
int maxChunkSize)
Creates a new instance with the specified parameters.
|
HttpRequestDecoder(int maxInitialLineLength,
int maxHeaderSize,
int maxChunkSize,
boolean validateHeaders)
已过时。
Prefer the
HttpRequestDecoder(HttpDecoderConfig) constructor,
to always have header validation enabled. |
HttpRequestDecoder(int maxInitialLineLength,
int maxHeaderSize,
int maxChunkSize,
boolean validateHeaders,
int initialBufferSize)
已过时。
Prefer the
HttpRequestDecoder(HttpDecoderConfig) constructor,
to always have header validation enabled. |
HttpRequestDecoder(int maxInitialLineLength,
int maxHeaderSize,
int maxChunkSize,
boolean validateHeaders,
int initialBufferSize,
boolean allowDuplicateContentLengths)
已过时。
Prefer the
HttpRequestDecoder(HttpDecoderConfig) constructor,
to always have header validation enabled. |
HttpRequestDecoder(int maxInitialLineLength,
int maxHeaderSize,
int maxChunkSize,
boolean validateHeaders,
int initialBufferSize,
boolean allowDuplicateContentLengths,
boolean allowPartialChunks)
已过时。
Prefer the
HttpRequestDecoder(HttpDecoderConfig) constructor,
to always have header validation enabled. |
限定符和类型 | 方法和说明 |
---|---|
protected HttpMessage |
createInvalidMessage() |
protected HttpMessage |
createMessage(java.lang.String[] initialLine) |
protected boolean |
isContentAlwaysEmpty(HttpMessage msg) |
protected boolean |
isDecodingRequest() |
protected java.lang.String |
splitFirstWordInitialLine(byte[] sb,
int start,
int length) |
protected AsciiString |
splitHeaderName(byte[] sb,
int start,
int length) |
protected java.lang.String |
splitThirdWordInitialLine(byte[] sb,
int start,
int length) |
decode, decodeLast, handlerRemoved0, handleTransferEncodingChunkedWithContentLength, isSwitchingToNonHttp1Protocol, isValidating, reset, splitSecondWordInitialLine, userEventTriggered
actualReadableBytes, callDecode, channelInactive, channelRead, channelReadComplete, discardSomeReadBytes, handlerRemoved, internalBuffer, isSingleDecode, setCumulator, setDiscardAfterReads, setSingleDecode
channelActive, channelRegistered, channelUnregistered, channelWritabilityChanged, exceptionCaught
ensureNotSharable, handlerAdded, isSharable
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
handlerAdded
public HttpRequestDecoder()
maxInitialLineLength (4096)
, maxHeaderSize (8192)
, and
maxChunkSize (8192)
.public HttpRequestDecoder(int maxInitialLineLength, int maxHeaderSize, int maxChunkSize)
@Deprecated public HttpRequestDecoder(int maxInitialLineLength, int maxHeaderSize, int maxChunkSize, boolean validateHeaders)
HttpRequestDecoder(HttpDecoderConfig)
constructor,
to always have header validation enabled.@Deprecated public HttpRequestDecoder(int maxInitialLineLength, int maxHeaderSize, int maxChunkSize, boolean validateHeaders, int initialBufferSize)
HttpRequestDecoder(HttpDecoderConfig)
constructor,
to always have header validation enabled.@Deprecated public HttpRequestDecoder(int maxInitialLineLength, int maxHeaderSize, int maxChunkSize, boolean validateHeaders, int initialBufferSize, boolean allowDuplicateContentLengths)
HttpRequestDecoder(HttpDecoderConfig)
constructor,
to always have header validation enabled.@Deprecated public HttpRequestDecoder(int maxInitialLineLength, int maxHeaderSize, int maxChunkSize, boolean validateHeaders, int initialBufferSize, boolean allowDuplicateContentLengths, boolean allowPartialChunks)
HttpRequestDecoder(HttpDecoderConfig)
constructor,
to always have header validation enabled.public HttpRequestDecoder(HttpDecoderConfig config)
protected HttpMessage createMessage(java.lang.String[] initialLine) throws java.lang.Exception
createMessage
在类中 HttpObjectDecoder
java.lang.Exception
protected AsciiString splitHeaderName(byte[] sb, int start, int length)
splitHeaderName
在类中 HttpObjectDecoder
protected java.lang.String splitFirstWordInitialLine(byte[] sb, int start, int length)
protected java.lang.String splitThirdWordInitialLine(byte[] sb, int start, int length)
protected HttpMessage createInvalidMessage()
createInvalidMessage
在类中 HttpObjectDecoder
protected boolean isDecodingRequest()
isDecodingRequest
在类中 HttpObjectDecoder
protected boolean isContentAlwaysEmpty(HttpMessage msg)